CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,318; of 17,813 indexed, latest versions
Container images: 2,310; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,318 of 17,813 indexed charts deploy, on 2,310 images.

Affected package	Affected versions	Fixed in	Images
ncursesdeb	5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more	5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more	2,309
ncursesrpm	6.4-2.azl3	6.4-3	1

OSV records: DEBIAN-CVE-2025-6141 UBUNTU-CVE-2025-6141 AZL-64139
Also known as: USN-8709-1

Charts affected

2,318 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,310 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/okteto/pipeline-runner :0.0.0-2026-08-03 :0.0.0-2026-08-17	3e56bdd1b90d	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	ncurses@6.4-4	no fix listed	1
ghcr.io/openappsec/openappsec-waf-webhook :1.1.34	5b979b962043	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	ncurses@6.4-4	no fix listed	1
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	ncurses@6.4-4	no fix listed	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	ncurses@6.4-4	no fix listed	1
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	ncurses@6.4-4	no fix listed	1
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	ncurses@6.4-4	no fix listed	1
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	ncurses@6.4-4	no fix listed	1
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	ncurses@6.4-4	no fix listed	1
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :3.1.0-chatbot	604b1f493c92	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :3.1.0-mcp	81db69cdd0b6	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :3.1.0-flagd-ui	97a3d37e709f	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/open-telemetry/demo :3.1.0-load-generator	b130d6cee6cb	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	ncurses@6.4-4	no fix listed	1
ghcr.io/open-telemetry/demo :3.1.0-agent	d0f4ae0b32a8	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-telemetry/demo :3.1.0-ad	dfd7a4697116	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	1
ghcr.io/open-telemetry/demo :3.1.0-frontend-proxy	fd4da88bfeaa	ncurses@6.3-2ubuntu0.2	6.3-2ubuntu0.3	1
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3	1
ghcr.io/open-webui/mcpo :git-39b4867	f06525afac6b	ncurses@6.4-4	no fix listed	1
ghcr.io/open-webui/open-terminal :0.13.0-slim	dec44673c865	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	ncurses@6.5+20250216-2	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	ncurses@6.4-4	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	ncurses@6.4-4	no fix listed	1